IT Engineer

We are looking for an IT Engineer to maintain, upgrade and manage our software, hardware and networks. You will be responsible for supporting and maintaining Client operating systems - Mac, Windows. General maintenance of all IT-related hardware/software. The position provides

exposure to a broad range of IT-related projects and activities. Your goal will be to provide effective IT assistance across all aspects of the business and ensure that our technology infrastructure runs smoothly and efficiently.

Key responsibilities :

• Own macOS management in Jamf Pro: enrollment, configuration profiles, Smart Groups, policies, software deployment, and compliance reporting
• Own Windows management in Microsoft Intune: device enrollment, configuration profiles, Update Rings, Win32 app packaging, and compliance policies.
• Maintain security baselines (FileVault/BitLocker, firewall, disk encryption, USB controls, patching cadence) across macOS and Windows.
• Administer Azure AD (Entra ID) and Google Workspace (users, groups, SSO, basic CA, app integrations) for day-to-day operations.
• Create clear technical documentationrunbooks, SOPs, change records, and user guides.
• Experienced in Jira or ServiceNow: ticket triage, SLAs, change management. Monitor fleet health and compliance; drive continuous improvement and root-cause analysis for incidents.
• Partner with Compliance on audits and evidence (asset visibility, encryption, patch posture, access controls).

Minimum qualifications :

• 1+ years managing endpoints at scale: macOS with Jamf MDM (policies, profiles, packaging, reporting) Windows with Intune (configuration, application deployment,compliance, updates) 23 years admin experience across Azure AD (Entra ID) and Google Workspace.
• Ability to read, modify, and write Bash and PowerShell scripts when needed. Proven technical writing skills (SOPs, runbooks, architecture notes).
• Experience using Jira or ServiceNow, including Change Management processes. Nice to have (preferred) Jamf 200/300/370 or similar certifications; Microsoft MD-102/SC-300 a plus.
• Packaging tools (Composer, Munki/Autopkg, IntuneWin, Winget). Identity & SSO familiarity (SAML/OIDC), Conditional Access basics, device compliance signals. Mac/Win update strategies at scale and rollout rings.
• Reporting/automation via APIs (Jamf Pro API, MS Graph, Google Admin SDK). Exposure to SentinelOne, Zscaler agents and their MDM deployment